This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: 01LQAYL1YhudMXC/YLXB+9KvkxfMQKdfurLHnD9TNco= Subject key identifier: BD:92:79:F9:28:B4:8D:71:EA:54:D3:7C:CF:C4:38:EC:08:C2:16:E0 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0CB6 Signing time: Mon 22 Dec 2025 17:53:09 +0000 Manifest this update: Mon 22 Dec 2025 17:53:09 +0000 Manifest next update: Mon 29 Dec 2025 17:53:09 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: Ju0vuwfdbV3RASagZK+pT2tslqFVo5DNfUK9kgG4E/M=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:53:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Dec 22 17:53:09 2025 GMT Not After : Dec 29 17:53:09 2025 GMT Subject: CN=69498585-36fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:37:18:f2:e0:f5:1d:20:27:22:da:43:25:c6: 99:22:8d:ea:46:36:a2:2f:09:13:cc:70:01:9a:31: 3e:65:b6:d5:5d:9e:df:95:a3:c5:dd:32:c3:18:27: 3f:01:c0:9f:71:06:fa:2d:8e:35:16:c6:cd:4d:6a: d3:fa:45:6a:f5:4c:5e:9a:5f:68:bf:97:c4:0d:dd: 10:a2:bf:b5:9e:8d:f6:8b:43:1f:6e:b3:1e:5d:c8: 74:d5:22:8a:f7:c9:d7:41:a8:63:8b:7d:36:30:d2: 35:42:e9:82:fc:84:4f:ab:c7:ed:a5:69:67:96:a2: 05:d4:03:41:e3:88:a5:d2:0d:b8:09:85:5f:64:e7: cf:be:6a:0f:e0:72:1a:8a:39:c3:2f:e3:9c:38:c7: f1:63:ab:fb:15:49:97:cb:48:0b:be:5d:96:a4:28: 8d:de:ae:27:c4:fc:b5:66:69:d1:70:3f:9a:8c:6c: 15:15:f6:1a:4a:f6:a2:b9:e5:4e:f9:ba:bf:e0:58: ef:b6:52:fb:68:dd:aa:8e:6c:72:bd:76:2c:c2:5a: 75:11:21:d5:6a:68:cf:c5:17:f9:0c:bc:d5:40:9e: 01:6d:4f:6d:8d:1b:9a:29:5f:04:cd:cd:78:15:14: 83:98:82:81:a5:95:e7:cf:4a:c3:36:4e:eb:d8:f3: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:92:79:F9:28:B4:8D:71:EA:54:D3:7C:CF:C4:38:EC:08:C2:16:E0 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:5f:62:df:5c:20:b7:47:61:d5:08:6c:f7:6a:1b:d2:8d:e9: b0:bc:85:08:48:f6:51:59:b0:d2:fb:3b:22:ac:32:bc:09:3e: b0:a7:11:08:a9:5b:41:0f:e0:d4:9c:d6:6b:f5:29:10:ab:91: 90:d2:f5:26:a2:a7:2a:38:f1:28:2a:2a:64:a2:f9:77:23:2f: 4f:b5:49:15:54:5a:51:ef:a3:75:1d:28:f6:b6:8d:10:fd:bc: 63:cc:1c:52:0e:a7:81:03:b1:38:d4:a4:09:a4:f0:7b:6e:46: 52:f6:8a:a3:73:2d:81:7c:3d:a2:db:de:77:0e:54:d4:eb:8f: 99:b6:8f:d0:34:54:1d:37:44:25:56:01:46:a0:24:b2:5e:69: f9:37:3d:34:30:54:7e:28:3f:fb:03:9c:a1:6f:0b:3d:bf:46: a0:c0:40:64:48:87:21:7a:cd:10:96:5f:37:6a:9b:56:00:ae: 2e:82:db:27:f8:8c:e1:82:77:ae:15:f5:58:aa:d8:f9:82:df: 08:36:ff:58:fd:fc:a8:35:fb:bc:c0:60:e1:d5:9e:b7:21:9f: 8a:78:ca:91:b3:53:b5:92:e6:d2:18:0a:fa:57:af:ce:17:15: ca:7c:4a:78:c7:f1:38:be:e4:1c:f6:8e:4d:50:e0:2e:2e:92: b2:fa:ec:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUxMjIyMTc1MzA5WhcNMjUxMjI5MTc1MzA5WjAYMRYwFAYD VQQDDA02OTQ5ODU4NS0zNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszcY8uD1HSAnItpDJcaZIo3qRjaiLwkTzHABmjE+ZbbVXZ7flaPF3TLDGCc/ AcCfcQb6LY41FsbNTWrT+kVq9Uxeml9ov5fEDd0Qor+1no32i0MfbrMeXch01SKK 98nXQahji302MNI1QumC/IRPq8ftpWlnlqIF1ANB44il0g24CYVfZOfPvmoP4HIa ijnDL+OcOMfxY6v7FUmXy0gLvl2WpCiN3q4nxPy1ZmnRcD+ajGwVFfYaSvaiueVO +bq/4FjvtlL7aN2qjmxyvXYswlp1ESHVamjPxRf5DLzVQJ4BbU9tjRuaKV8Ezc14 FRSDmIKBpZXnz0rDNk7r2PMo5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2Sefko tI1x6lTTfM/EOOwIwhbgMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChX2LfXCC3R2HVCGz3ahvSjemwvIUISPZRWbDS+zsirDK8CT6wpxEI qVtBD+DUnNZr9SkQq5GQ0vUmoqcqOPEoKipkovl3Iy9PtUkVVFpR76N1HSj2to0Q /bxjzBxSDqeBA7E41KQJpPB7bkZS9oqjcy2BfD2i2953DlTU64+Zto/QNFQdN0Ql VgFGoCSyXmn5Nz00MFR+KD/7A5yhbws9v0agwEBkSIches0Qll83aptWAK4ugtsn +IzhgneuFfVYqtj5gt8INv9Y/fyoNfu8wGDh1Z63IZ+KeMqRs1O1kubSGAr6V6/O FxXKfEp4x/E4vuQc9o5NUOAuLpKy+uzl -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:20 2025 by rpki-client